Like JSONStream, but using Minipass streams
65%
Total Score
50
100
83
100
Only one registry account, isaacs, can publish the package. The linked repository is owned by the same individual, so the ownership is consistent, but the contributor and publishing base is thin.
The package has only 3 releases since October 2019, with a median interval of about 881 days and no releases in the last 12 months. The latest release was in July 2024, indicating slow maintenance but not abandonment by itself.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance concern, although the repository was pushed in October 2025 and the package may require few changes.
The repository has 4 stars, 1 fork, and 1 watcher, showing limited adoption and external visibility. Popularity is supporting evidence rather than a verdict, so this only modestly lowers confidence in long-term maintenance capacity.
The repository reports no build tools and no security-scanning tools. For this small JavaScript package that is a hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
minipass Version ^3.0.0 | — | — |
jsonparse Version ^1.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.